$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: 2lRQTMxZIzqR0eahtEsZX67YaMf8NCTH6HMcybADQsU= Subject key identifier: A5:5A:74:21:FC:01:DA:1A:D4:40:D3:08:38:CE:78:DB:AB:42:36:46 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 0195 Signing time: Mon 03 Nov 2025 03:28:19 +0000 Manifest this update: Mon 03 Nov 2025 03:28:19 +0000 Manifest next update: Mon 10 Nov 2025 03:28:19 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: dVP0isCnh9vLLTUp+kAuJlXCC5/k1eZ/knXeOaK7/vk=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: ZbN7HX75z4kqrPzQKLv8pw3PHkYxa9adZyy5gxVNx/4=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: HRtaeBIfXS4j0TAnrmFrjM5dZZkH7hynrpn4rWDNaLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Nov 3 03:28:19 2025 GMT Not After : Nov 10 03:28:19 2025 GMT Subject: CN=69082153-b886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:a7:42:09:6c:b2:86:74:32:17:ec:79:70: 1b:8c:0f:98:ec:55:d1:93:bc:ae:0b:f8:6d:09:28: d4:c1:31:7e:d6:8f:f6:93:20:30:20:ba:80:b8:9c: 20:6c:47:5d:8f:0f:63:ff:6e:10:51:d0:d1:88:2e: e3:51:bc:98:2a:31:91:6f:d4:ec:e8:98:bc:a0:28: 87:25:70:e3:39:05:e2:18:2a:57:0d:60:e7:84:b5: dc:37:ef:da:1c:41:96:8d:80:67:6a:a5:1c:95:66: ab:96:f9:ec:ff:e0:5d:dd:5a:58:67:bd:60:f7:a8: 7c:9e:f7:0c:fb:4e:82:2b:f3:fe:2f:c6:f9:4d:aa: 6d:67:10:8d:85:e7:9b:07:dc:ad:7e:2e:6c:7d:ee: b2:40:1d:09:35:7c:be:b1:a2:86:6e:e3:d9:6d:c1: ad:81:21:d6:1e:e6:47:2c:45:50:9a:34:9a:34:75: 8d:22:cb:09:ad:e5:31:ce:3e:f5:80:33:e4:d9:eb: 52:00:f5:9a:53:cf:b6:44:17:95:2f:31:0a:ea:66: 8d:43:cb:38:74:97:ad:ae:bf:9d:40:03:6b:55:4d: 8d:3c:f0:54:13:c4:65:9b:72:de:75:45:42:dc:b0: 7e:89:87:7f:36:1b:73:21:a5:0e:86:cd:8d:fe:97: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:74:21:FC:01:DA:1A:D4:40:D3:08:38:CE:78:DB:AB:42:36:46 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a4:15:33:88:b2:bf:27:6c:88:ca:80:f4:9b:92:69:3c:a2: 1d:24:86:92:45:7b:3c:02:c6:f6:01:56:1b:de:41:de:f6:8b: f5:c4:85:e0:0d:4b:9a:62:b3:ce:ee:08:2d:1f:9d:bb:b8:7f: 69:64:00:ce:97:08:49:24:65:1e:91:00:47:0a:d9:0d:4d:2a: a9:89:b9:02:3a:c1:e6:bf:9b:53:6d:57:07:a0:bd:d6:87:30: 56:2e:a5:5e:80:21:78:e9:33:f7:23:c5:27:03:1c:6a:62:85: 0e:cb:f9:1f:b5:a6:22:96:eb:af:12:ea:90:76:2e:66:b2:90: 5d:a4:81:90:4c:8b:2b:ae:7d:94:41:42:5e:a5:4a:15:e3:0f: 76:55:83:ef:53:d2:63:dd:1f:83:2b:0a:1e:a1:19:65:0c:87: ff:af:50:a9:a0:4a:b6:66:06:4c:55:58:f0:93:77:5f:5d:07: 7c:13:df:84:05:28:a4:ef:46:e3:78:3a:12:75:55:29:cf:53: 6f:c6:7f:86:f1:90:dc:ba:90:82:92:39:64:a9:c4:fa:af:d7: 04:0b:fe:48:82:f5:2e:d0:e5:31:be:11:65:19:16:80:e7:33: 59:4a:f6:cd:d1:90:39:73:61:d1:4c:1e:9b:1b:4d:ac:be:e9: 0d:5d:ef:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUxMTAzMDMyODE5WhcNMjUxMTEwMDMyODE5WjAYMRYwFAYD VQQDEw02OTA4MjE1My1iODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFOnQglssoZ0MhfseXAbjA+Y7FXRk7yuC/htCSjUwTF+1o/2kyAwILqAuJwg bEddjw9j/24QUdDRiC7jUbyYKjGRb9Ts6Ji8oCiHJXDjOQXiGCpXDWDnhLXcN+/a HEGWjYBnaqUclWarlvns/+Bd3VpYZ71g96h8nvcM+06CK/P+L8b5TaptZxCNheeb B9ytfi5sfe6yQB0JNXy+saKGbuPZbcGtgSHWHuZHLEVQmjSaNHWNIssJreUxzj71 gDPk2etSAPWaU8+2RBeVLzEK6maNQ8s4dJetrr+dQANrVU2NPPBUE8Rlm3LedUVC 3LB+iYd/NhtzIaUOhs2N/pcW4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVadCH8 Adoa1EDTCDjOeNurQjZGMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxpBUziLK/J2yIyoD0m5JpPKIdJIaSRXs8Asb2AVYb3kHe9ov1xIXg DUuaYrPO7ggtH527uH9pZADOlwhJJGUekQBHCtkNTSqpibkCOsHmv5tTbVcHoL3W hzBWLqVegCF46TP3I8UnAxxqYoUOy/kftaYiluuvEuqQdi5mspBdpIGQTIsrrn2U QUJepUoV4w92VYPvU9Jj3R+DKwoeoRllDIf/r1CpoEq2ZgZMVVjwk3dfXQd8E9+E BSik70bjeDoSdVUpz1Nvxn+G8ZDcupCCkjlkqcT6r9cEC/5IgvUu0OUxvhFlGRaA 5zNZSvbN0ZA5c2HRTB6bG02svukNXe/d -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:45 2025 by rpki-client